> Dustin Doris wrote: > > >>Hi, > >> > >>how can i manage to accept two kind of users: > >>the first: > >> premium, may login from serverA and serverB > >>the second: > >> normal, may only login from serverB > >> > >>I thought to manage this by huntgroup-file: > >>################################ > >>huntgroup-file: > >> > >>premium NAS-IP-Address == serverA > >>premium NAS-IP-Address == serverB > >>* > >>*normal NAS-IP-Address == serverB > >>################################ > >> > >>But with this configuration only the premium user > >>can login from serverB, the normal users are denied!! > >> > >> > >> > > > >Good start, but what's in your users file? There is more to it, the > >huntgroup file only defines what is a huntgroup. Something else (such as > >the users file) will define what to do if someone is in that huntgroup. > > > > > >- > >List info/subscribe/unsubscribe? See > >http://www.freeradius.org/list/users.html > > > > > The users file looks like that: > user1 Auth-Type := PAP, Crypt-Password == "XXXXXXX", Huntgroup-Name == > premium > Service-Type = Framed-User, > Framed-Protocol = PPP, > Framed-IP-Netmask = 255.255.255.0, > Framed-IP-Address = 10.10.11.11 > > user2 Auth-Type := PAP, Crypt-Password == "YYYYYYY", Huntgroup-Name == > normal > Service-Type = Framed-User, > Framed-Protocol = PPP, > Framed-IP-Netmask = 255.255.255.0, > Framed-IP-Address = 10.10.10.11 > > and user1 is allowed to login, but user2 is denied, also both login from > serverB. > I am using Freeradius 1.0.1. >
You have serverB in both huntgroups. The first one that matches will be used. Therefore, serverB will only be in the premium huntgroup. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html